Bad request from NAS - ACS error

[allanc16]

Hello,

I have succesfully implemented AAA using ACS v4.2 and HP Procurve switches  in which they work for authenticatio, authorization and accounting however I am having an issue with a couple of switches that i know where working before.

These 2 procurve switches are configured using the same RADIUS servers, same authentication and authorization settings and of course the same shared secret key I have validated on both sides (Client and ACS) but I am getting this error which I can see on the failed attempts section on the ACS.

Message-Type: Bad request from NAS

Authen-Failure-Code: Invalid message authenticator in EAP request

Thanks

[Jatin Katyal]

Hi Allan,

This is a purely shared secret mis-match issue. I understand that you've already checked the secret key on both the sides and still you're getting this error.

Well, next step should be to check key under the NDG where we have defined these switches. The key defined on the NDG level over-rides the key at the AAA client level.

http://tools.cisco.com/squish/AcF7C

"Each device that is assigned to the Network Device Group will use theshared key that you enter here. The key that was assigned to the device when it was added to the system is ignored. If the key entry is null, the AAA client key is used."

Rgds, Jatin

Do rate helpful posts~